$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ceaea99f-2361-3e42-81dc-2424d99387d5.roa File: ceaea99f-2361-3e42-81dc-2424d99387d5.roa (raw, json) Hash identifier: j5kgKHzl59b+u6I1R+OU4DxmOOrgehs0ju9AjTk9oIY= Subject key identifier: CB:47:4F:CA:26:64:AE:12:E8:7F:3C:9A:2B:FD:45:38:F7:2B:17:C4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F698D8A8FA9F4609D32232880 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ceaea99f-2361-3e42-81dc-2424d99387d5.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 8069 IP address blocks: 20.33.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:8a:8f:a9:f4:60:9d:32:23:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=16d598d5-059d-494f-b863-754dcb7fcd07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e8:31:32:f3:dd:68:dc:d8:41:c9:70:23:b6: 75:1d:0e:11:4d:ea:1a:fa:df:89:95:7c:c1:74:25: 6c:38:e7:af:10:da:31:bd:52:f5:be:b1:29:96:c0: e5:92:6b:8f:2e:d9:ad:4c:01:7d:3d:67:d5:c1:1f: 80:aa:39:f7:ea:0a:34:b9:d6:45:f9:a1:e8:cb:64: 77:65:7a:2f:01:67:ab:52:13:46:34:61:9a:85:a8: 02:75:51:e6:4e:99:77:c1:e1:7a:64:7b:4b:fa:70: e0:67:60:4a:81:62:bf:2f:aa:b2:8e:39:b1:5e:b4: eb:95:b6:7f:5a:4a:d5:eb:de:20:62:01:4d:ab:1b: d1:73:54:57:3f:75:29:cd:ef:e9:93:94:ac:b7:e8: fd:15:57:26:e4:69:0f:6b:0c:05:21:c5:72:38:a5: b4:b6:40:c5:57:3b:f1:65:20:b5:09:aa:9f:b2:21: 11:ed:42:66:d4:87:af:7f:b9:2a:b5:8b:f3:a6:4c: cb:1f:72:e3:7e:b4:50:f3:a0:f4:9f:e2:96:d6:a8: cf:c5:6b:39:df:fd:a4:9b:ad:59:a6:d8:33:ed:3d: b6:28:35:44:76:83:d9:54:d0:d2:da:c5:24:23:dc: 14:f4:9a:9e:11:20:48:98:f4:8d:f1:2e:23:e7:26: 50:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:47:4F:CA:26:64:AE:12:E8:7F:3C:9A:2B:FD:45:38:F7:2B:17:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ceaea99f-2361-3e42-81dc-2424d99387d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:79:b5:22:be:08:e3:85:bd:5a:19:1a:da:8f:dd:42:c4:9c: 3e:54:7f:1e:5d:50:1d:a0:97:16:9d:9f:d5:9b:11:e0:60:09: 60:3e:ca:02:53:3a:67:dc:f4:a0:0d:15:52:2a:01:ab:24:75: 58:66:75:2d:97:df:70:c6:26:95:96:bd:50:78:fc:f4:f5:01: eb:80:b1:15:d5:d6:9e:bd:cf:b9:b9:07:ca:b9:27:4f:18:90: 41:7f:32:cb:f4:c6:1b:c2:26:aa:f3:c7:61:e7:03:61:e1:84: 38:d6:a7:c1:5f:d8:6f:51:78:cc:75:64:22:b9:c8:ee:00:37: eb:7b:c8:4e:dc:9a:61:e6:c6:33:84:fe:18:58:be:17:82:2e: ff:0d:a4:65:32:54:b0:19:ad:f2:d0:62:6f:bc:78:a5:79:41: 1c:5f:8f:f5:6a:af:3a:c2:08:cf:88:82:d2:35:85:53:fb:af: 97:c7:66:54:f2:d3:78:6b:af:d8:c7:dd:52:0c:28:24:1e:d0: 3a:30:5a:9a:c6:3d:50:4d:34:09:be:c3:ed:ec:ae:ef:41:e5: 41:a4:3f:ff:38:04:1e:f1:32:ca:86:49:c3:e4:07:6b:a7:49: ca:2b:72:36:24:9e:af:1d:c0:e6:bb:cf:9c:7b:5a:a1:0e:09: 1f:ca:7d:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjYqPqfRgnTIjKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk MTZkNTk4ZDUtMDU5ZC00OTRmLWI4NjMtNzU0ZGNiN2ZjZDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1egxMvPdaNzYQclwI7Z1HQ4RTeoa+t+JlXzB dCVsOOevENoxvVL1vrEplsDlkmuPLtmtTAF9PWfVwR+Aqjn36go0udZF+aHoy2R3 ZXovAWerUhNGNGGahagCdVHmTpl3weF6ZHtL+nDgZ2BKgWK/L6qyjjmxXrTrlbZ/ WkrV694gYgFNqxvRc1RXP3Upze/pk5Sst+j9FVcm5GkPawwFIcVyOKW0tkDFVzvx ZSC1CaqfsiER7UJm1Ievf7kqtYvzpkzLH3LjfrRQ86D0n+KW1qjPxWs53/2km61Z ptgz7T22KDVEdoPZVNDS2sUkI9wU9JqeESBImPSN8S4j5yZQuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtHT8omZK4S6H88miv9RTj3KxfEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2VhZWE5OWYtMjM2MS0z ZTQyLTgxZGMtMjQyNGQ5OTM4N2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHp5tSK+COOFvVoZGtqP3ULEnD5Ufx5dUB2glxadn9WbEeBgCWA+ygJT Omfc9KANFVIqAaskdVhmdS2X33DGJpWWvVB4/PT1AeuAsRXV1p69z7m5B8q5J08Y kEF/Msv0xhvCJqrzx2HnA2HhhDjWp8Ff2G9ReMx1ZCK5yO4AN+t7yE7cmmHmxjOE /hhYvheCLv8NpGUyVLAZrfLQYm+8eKV5QRxfj/VqrzrCCM+IgtI1hVP7r5fHZlTy 03hrr9jH3VIMKCQe0DowWprGPVBNNAm+w+3sru9B5UGkP/84BB7xMsqGScPkB2un ScorcjYknq8dwOa7z5x7WqEOCR/KfUU= -----END CERTIFICATE-----Generated at Sat Oct 10 15:45:07 2026 by rpki-client